Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
File: j5pGcBRq2IDxS62ksnYrYT3fHRg.mft (raw, json)
Hash identifier: 79oquIZRPAhTQ84Zm6lY+/SF98lCCubefZRRtyLt7mo=
Subject key identifier: 7D:EE:73:0A:81:66:8E:76:DD:83:AD:77:E1:5B:FA:41:A6:00:CB:11
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial: 0198D54E195863B6004C1CDCD05B7B546CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
Manifest number: 0C82
Signing time: Sat 23 Aug 2025 05:02:01 +0000
Manifest this update: Sat 23 Aug 2025 05:02:01 +0000
Manifest next update: Sun 24 Aug 2025 05:02:01 +0000
Files and hashes: 1: UbUeMfpLDU2B5tdTAaw2aWanYxE.roa (hash: tdkyhyzbAK1xvoMt58nvdU/zMVFNztmsRhNZhHaMbYQ=)
2: j5pGcBRq2IDxS62ksnYrYT3fHRg.crl (hash: A+mXFMwev6kD7rGtiPQyfmCPZp/kYYz2ZgqgSyxqbA4=)
3: ymEXcJVVoGyICrDxKsSN1clsK5E.roa (hash: AJjBik7pMke5JpIJlFEXV/dLTYXuYObLdzj39aIHrMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:19:58:63:b6:00:4c:1c:dc:d0:5b:7b:54:6c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Validity
Not Before: Aug 23 05:02:01 2025 GMT
Not After : Aug 24 05:02:01 2025 GMT
Subject: CN=7dee730a81668e76dd83ad77e15bfa41a600cb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:a4:17:40:60:c2:3e:19:0c:82:e8:cc:38:
09:24:b9:09:36:c2:5d:01:bb:03:b3:fc:41:98:00:
5e:1e:1c:40:77:f2:65:78:03:7c:5d:77:1b:ab:30:
a3:9e:f3:d2:65:23:90:e2:77:1d:3b:a7:7e:a5:f2:
23:9a:11:d4:77:32:05:f3:27:a1:2e:03:bf:45:91:
1d:07:86:10:8b:3f:35:bd:38:4b:e4:37:c0:d0:0f:
f8:c8:df:4a:78:9d:7c:e6:ac:51:7c:08:85:73:4d:
c5:57:2d:d0:3e:e9:6d:f9:d2:7d:37:74:8c:76:70:
52:46:e8:e1:43:b8:fc:ac:a9:a9:f3:fe:91:0e:91:
16:ce:f4:39:f6:06:00:62:15:6f:40:fb:0a:df:bd:
93:2c:6a:1b:11:8c:c2:35:26:36:1f:05:cf:43:36:
73:a9:0b:56:e2:8b:d4:e9:30:b2:9c:5a:58:ae:f6:
e8:1c:d7:d0:c7:33:6c:0c:da:ae:6e:6c:68:47:34:
32:f0:97:37:67:31:e2:c7:f8:47:fa:64:c8:7b:c2:
71:e6:36:28:50:0b:4f:87:0a:3d:67:57:ee:eb:05:
42:79:9c:df:f5:8f:75:52:c2:72:f1:4a:aa:93:0b:
b7:9f:12:e7:93:f7:76:c5:ba:fc:7f:5e:02:9c:03:
8d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EE:73:0A:81:66:8E:76:DD:83:AD:77:E1:5B:FA:41:A6:00:CB:11
X509v3 Authority Key Identifier:
keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0f:f7:40:c9:eb:0b:bf:08:75:e1:38:88:29:8f:57:65:76:
bd:2d:b0:f8:af:67:c0:0b:bd:08:a8:70:c3:13:8f:73:36:61:
c6:39:c5:a6:4e:6c:44:4f:51:e2:c8:28:a2:04:3f:63:7b:92:
f6:87:7f:8f:b7:81:82:ba:c7:f8:8b:50:2d:f7:9b:3e:ae:3e:
01:77:f4:cb:3a:0b:f9:8f:78:56:a5:d6:ee:92:1c:db:0f:e8:
d5:35:57:ca:5f:8c:9b:23:8e:fe:13:74:bd:3d:b4:6f:2e:86:
04:f7:c6:ed:a5:0c:73:27:bf:61:01:7a:0d:f7:51:04:66:7d:
d8:f0:0f:3b:af:fb:f4:fd:d6:a1:ef:73:2b:ae:02:53:a5:93:
a8:39:3b:57:c1:3b:75:de:d9:04:be:a1:9b:ae:59:19:d4:15:
87:4f:50:16:f4:a8:c7:41:79:a3:7f:c1:03:1f:86:c2:ac:85:
11:f0:63:8e:ae:9b:a3:96:be:d0:fa:ef:85:59:c8:3f:fc:74:
66:27:b8:4c:12:86:c1:31:55:ea:cd:3c:f6:ca:4b:83:02:f7:
5c:6f:28:83:7c:07:29:af:69:18:60:32:d9:3d:f0:76:33:a0:
60:e5:96:42:d5:90:90:2b:ad:95:01:d6:69:50:aa:bc:f5:a8:
78:3c:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:43 2025 by rpki-client